NetSight
IP …
medium4.3

CVE-2015-4141

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to c…

Impact

The WPS UPnP function in hostapd, when using WPS AP, and wpa_supplicant, when using WPS external registrar (ER), 0.7.0 through 2.4 allows remote attackers to cause a denial of service (crash) via a negative chunk length, which triggers an out-of-bounds read or heap-based buffer overflow.

Affected products

VendorProductAffected versions
W1.FiWpa Supplicant
Versions 0.7.0, 0.7.1, 0.7.2, 0.7.3, 1.0, 1.1
W1.FiHostapd
Versions 0.7.0, 0.7.1, 0.7.2, 0.7.3, 1.0, 1.1
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References